ServiceNow has signed a definitive agreement to acquire Veza, an identity-security company known for its AI-driven approach to least-privilege access and governance.
Veza, founded by Maohua, Rob and their team, has become recognised for pioneering technology that addresses the rising complexity of identity management across large enterprises.
The acquisition was announced as a strategic move designed to accelerate identity-first security across modern enterprises. A deal value has not been disclosed. The companies said the agreement marks a “pivotal moment” for the growing identity security sector, driven by the rapid rise of AI agents and digital automation inside businesses.
Veza specialises in managing identity risks by mapping access permissions across cloud platforms, databases, SaaS applications and custom systems. Its flagship Access Graph product provides a contextual view of human, machine and agent identities, helping organisations understand who can access what data, under what conditions, and with what level of privilege. ServiceNow operates a broad platform that supports digital workflows for IT, cybersecurity, HR, service delivery and customer support for thousands of organisations worldwide.
In recent years, identity has become a central cyber security challenge for large companies, with many breaches originating from compromised access credentials rather than classic perimeter attacks. Veza claims that identity security must now operate at machine speed, focusing on automation, least-privilege enforcement and behavioural execution standards for AI systems. According to the companies, identity context and privileged risk scoring are now key capabilities for securing digital transformation.
The acquisition will allow ServiceNow to embed Veza’s identity and access capabilities directly into its platform, bringing visibility, control and workflow automation under a single architecture. The combined approach is expected to give enterprises an integrated security environment for both human andServiceNow, Veza, identity security, AI security, enterprise cybersecurity, access governance machine identities, especially as agentic AI tools multiply across organisations.
Additional background information released alongside the acquisition emphasises the growing number of non-human identities — such as AI agents, API keys and automated service accounts — and the need for continuous monitoring of access scopes, blast radius, dormant privileges and lateral-movement risks. Veza said identity is now “the strategic control point where risk, trust, and business growth converge.”
Find more on RegTech Analyst.
Keep up with all the latest FinTech news here
Copyright © 2025 FinTech Global
